CVE-2024-0868 — coreActivity < 2.1 - Unauthenticated IP Spoofing
The coreActivity: Activity Logging plugin for WordPress plugin before 2.1 retrieved IP addresses of requests via headers such X-FORWARDED to log them, allowing users to spoof th…
Published: 2024-04-17 · CVSS: 5.3 · CVSS 3.1
The coreActivity: Activity Logging plugin for WordPress plugin before 2.1 retrieved IP addresses of requests via headers such X-FORWARDED to log them, allowing users to spoof them by providing an arbitrary value
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7